Data Protection Notice

We have implemented technical and organisational security measures to protect your personal data from manipulation, loss, destruction, or access by unauthorised persons, and to ensure the protection of your rights and the observance of the applicable data protection regulations of the EU and of the Federal Republic of Germany (Art. 32 GDPR).

The implemented measures shall provide for the ongoing confidentiality and integrity of your data, as well as for the ongoing availability and resilience of our systems and services used for processing your data. Moreover, they shall ensure the ability to restore the availability and access to your personal data in a timely manner in the event of a physical or technical incident.

Our security measures include encryption of your data. Your data are encrypted by Transport Layer Security (HTTPS) during their transmission to us. All information entered online by you will be transferred via an encrypted transmission path and can therefore at no point in time be viewed by unauthorised third parties.

Our data processing and our security measures are being continuously improved according to the state of the art.

Our employees have of course signed a binding agreement to observe confidentiality and comply with the data protection requirements of the GDPR.

If you have questions regarding data protection or data security, you may contact our Data Protection Officer by e‑mail at data-protection[at]sovendus.co.uk or by mail at Sovendus GmbH, Data Protection Officer, Hermann-Veit-Straße 6, D‑76135 Karlsruhe.

If certain data fields are designated as or marked as “mandatory data” or “mandatory fields”, the collection of these data is either legally or contractually required, or else we need these data for conclusion of the contract, the requested service or the indicated purpose. It is of course your decision whether your supply these mandatory data or not. If not, we may not be able to fulfil the contract or to provide the requested service, or the indicated purpose may not be achieved.

We will process your data to reply to your queries (Art. 6 (1) (b) and (f) GDPR). The address and telecommunication data marked as mandatory data are necessary to deal with and reply to your request. If you voluntarily supply further data, it will be easier for us to deal with your query and we can reply in more detail. We usually store the information submitted with your query for a period of three months from our initial reply, in case there are further queries, unless a longer retention period is required for documentation purposes (Art. 6 (1) (c), Art. 5 (2) GDPR).

We will process your data from your requests for voucher and special offers, e-mail newsletters and the related transactions with Sovendus cooperation partners (Art. 6 (1) (f) GDPR), as well as – provided you have clicked on or closed the consent banner on one of our web pages – from the use of the Sovendus website and of the websites of the Sovendus cooperation partners (Art. 6 (1) (a) GDPR) for pseudonymous analyses, in order that we and our cooperation partners on the Internet will also in future be able to present offers that may be of interest for you (like vouchers or other local and supra-regional special offers). We will only use pseudonymized data for these analyses of your potential interests related to our vouchers and special offers (Art. 6 (1) (f) GDPR. You may object to this processing at any time.

Some of our advertising partners will present our voucher offers after your online purchase on their website. In order to select a currently interesting voucher offer for you, our advertising partners will transmit your pseudonymised hash value of your e-mail address and your IP-address in encrypted form to us (Art. 6 (1) (f) GDPR). The pseudonymised hash value of your e-mail address is used to consider a possibly existing objection to receive offers from us (Art. 21 (3), Art. 6 (1) (c) GDPR). The IP-address will be exclusively used for data security purposes and as a rule the same will be anonymised after seven days.

Furthermore, our advertising partners will transmit order number, order value with currency, session ID, coupon code, and time stamp in pseudonymised form to us (Art. 6 (1) (f) GDPR). If you are interested in one of our voucher offers, while there is no objection existing to receive such offers, and if you click on the voucher banner, our advertising partners will transmit your form of address, your name and your e mail address in encrypted form to us (Art. 6 (1) (b) and (f) GDPR).

When the required data have been processed to prepare your voucher, an e-mail with your voucher code will be sent to the e-mail address given by you (Art. 6 (1) (b) GDPR).

Some of our advertising partners present our special offers on their websites after you have made your online purchase on our site. To enable us to offer up-to-the-minute, regional offers that should be of interest to you, our advertising partners send us some pseudonymised and encrypted information, which includes the salutation, year of birth, country, postcode, hash value of the e-mail address and your IP address (Art. 6 (1) (f) GDPR). The pseudonymised hash value of the e-mail address will also be used by us for any possible rejection of advertising by you (Art. 21 (3), Art. 6 (1) (c) GDPR). We only use the IP address for the purpose of data security, and it is usually anonymised after seven days (Art. 6 (1) (b) and (f) GDPR). 

When you click a special offer, your name, address details and e-mail address will also be forwarded to us by our advertising partner in encrypted form, so that we can prepare the personalised request for the special offer for the respective product provider (Art. 6 (1) (b) and (f) GDPR). 

When you select one of our special offers, we first of all process your information that is required to order the special offer. Following this your details will also be sent to the product provider whose special offer you selected (Art. 6 (1) (b) GDPR). After this, we will only use your data in pseudonymised form for the purpose of analyses (Art. 6 (1) (f) GDPR (see b. above). 

Once the details have been transmitted, the respective product provider is then responsible for any further processing of your data.

If you select a catalogue of one of our advertising partners, we will process your data required to deal with your request. To this end we will also transmit your data to the respective advertising partner (Art. 6 (1) (b) GDPR). We will then only use your data in pseudonymized form for analyses (Art. 6 (1) (f) GDPR) (see above b.).

After transmission the respective advertising partner is solely responsible for the further processing of your data.

If you select by your express consent (which you may withdraw at any time) your personal newsletter of one of our advertising partners, the respective advertising partner will directly send you by e-mail the selected newsletter (Art. 7 (2) No. 3  UWG, Art. 6(1) (a) GDPR).

To this end we will transmit your data and your consent declaration to the respective advertising partner (Art. 6 (1) (a) and (f) GDPR). If you wish to withdraw your consent, you may at any time contact the advertising partner.

If you select by your express consent (which you may withdraw at any time) your personal newsletter of one of our advertising partners, the respective advertising partner will directly send you by e-mail the selected newsletter (§ 7 section 2 n° 3  Act Against Unfair Competition, UWG, art. 6, section 1 a GDPR).

To this end we will transmit your data and your consent declaration to the respective advertising partner (article 6, section 1 a, f GDPR). If you wish to withdraw your consent, you may at any time contact the advertising partner.

If you select by your express consent (which you may withdraw at any time) or on the basis of a contract your personal newsletter of a product supplier, the respective product supplier will directly send you by e-mail the selected newsletter (Art. 7 (2) No. 3 UWG, Art. 6 (1) (a) and (b) GDPR).

To this end we will transmit your data and your consent declaration or your contract declaration to the respective product supplier (Art. 7 (2) No. 3 UWG, Art. 6 (1) (a), (b) and (f) GDPR). If you wish to withdraw your consent, you may at any time contact the product supplier.

When we obtain your consent to the sending of e-mail newsletters, your IP address will be collected and stored for documentation purposes (Art. 7 (1), Art. 6 (1) (c) GDPR).

We will store your data collected for advertising purposes until you withdraw your consent or until you object to the processing of your data for advertising purposes.

We may change the processing purposes over time. Before implementing such changes, we will update this Data Protection Notice.

If you apply for a job with Sovendus, we will process your data to handle and evaluate your application (Art. 26 (1) GDPR). We need your address and telecommunication data marked as mandatory data to correctly assign your application and to contact you. Your application data marked as mandatory data allow us to assess the chances of success of your application.

If you are not chosen for or if you refuse the offered job, we will store your data for another three months for documentation purposes and then delete them, unless you have given us your consent to use your data for further application procedures (Art. 6 (1) (a) GDPR).

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, provided that the legal requirements are met (Art. 21 (1) GDPR).

If you want to object to the processing of your data for advertising purposes or if you wish to withdraw your consent (Art. 21 (2) GDPR), you may at any time send a short message to our Data Protection Officer by e-mail to data-protection[at]sovendus.co.uk or by mail to Sovendus GmbH, Data Protection, Hermann-Veit-Straße 6, D-76135 Karlsruhe. Your data will then no longer be processed for the advertising purposes covered by your objection or your withdrawal of consent.

This does not affect the lawfulness of the processing before objection or withdrawal of consent.

If you object to the processing of your personal data for advertising purposes or if you withdraw your consent, we are obliged, according to data protection law pursuant to Art. 21 (3) GDPR, to enter the required data (name, address, e-mail address) into our internal advertising black list and to store (block) these data permanently, in order that we can compare them with future advertising files (Art. 6 (1) (c) and (f) GDPR). In this way we can ensure the ongoing observance of your objection or of your withdrawal of consent. We will use your blocked data exclusively for this purpose.

“Cookies” are small files which are transmitted via your web browser or via other programmes to the hard disk of your computer. They are locally stored on the hard disk and may be retrieved at a later time.

When you click or close our consent banner on one of our web pages, or actively continue using our website, you declare your consent (which may be withdrawn at any time) to the use of cookies as explained on the banner (Art. 6 (1) (a) GDPR).

We use cookies

• to enable and secure the necessary technical functions (Art. 6 (1) (b) and (f) GDPR)
• to create a user-friendly Internet presence which best meets your requirements (Art. 6 (1) (a) GDPR),
• to analyse in pseudonymized form the visits to our website and to the websites of the Sovendus cooperation partners (web-tracking) (Art. 6 (1) (a) GDPR),
• in order that we and our cooperation partners on the Internet are able to provide offers of the greatest possible interest to you (like vouchers or other local and supra-regional special offers) (Art. 6 (1) (a) GDPR), and
• to observe the rejection of cookies and/or the withdrawal of your consent to the use of cookies (“do not track” cookies).

Session cookies are only used for one session. These cookies will be deleted upon termination of the session, i.e. when you leave our website or close the browser window.

Other cookies – including the "Sovendus opt-out" cookie – will remain on your end device over a longer period and enable us and/or third parties to recognize your browser during your next visit (persistent cookies).

Your web browser can be configured to notify you when a cookie is set or to block all or particular cookies generally (e.g. third-party cookies), in order to stop all web-tracking. However, if you deactivate cookies in your browser settings you will not be able to use all functions on our website.

The following links will inform you about how to change the settings of the most commonly used browsers:

• Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
• Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Safari: https://support.apple.com/kb/PH21411?locale=en_GB
• Opera: http://help.opera.com/Linux/12.10/en/cookies.html

Please note that if you delete all cookies, those cookies used to comply with the revocation options will also be deleted.

Sovendus Opt-Out

Sovendus uses pseudonymised identification procedures. In this way you receive offers tailored to your needs from us. If you do not want this, please deactivate this switch:

You will then only receive standard offers from Sovendus that are no longer tailored to your potential interests. What does that mean in specific terms?

• Example using vouchers: some of our advertising partners offer different vouchers for new and existing customers. Without the pseudonymised identification procedure it is not possible for us to show you the right voucher, which means you miss out on special discounts, or in the worst case you will be shown a voucher that you cannot redeem.
• Example using other offers, such as free trial offers (for daily newspapers, magazines or product samples): some of our product providers offer new customers different offers, which are not available to existing customers. Without the pseudonymised identification process, we are unable to show you the offers that are right for you, which means you may miss out on interesting offers or, in the worst case, you will be shown an offer that you can request, but which will then be rejected by the product provider.

AT Internet Opt-In / Opt-Out

Sovendus cooperates with the service provider AT Internet, which helps us to make our pages more user-friendly. If you do not want this, please deactivate this switch.

Every time a user accesses this website or websites in our advertising network, data about this process are stored and processed temporarily in a log file (Art. 6 (1) (f) GDPR). These data include:

• category or type of file requested,
• data and time of request,
• amount of data transferred,
• notification whether the request was successful,
• the access method/function preferred by the requesting terminal,
• a description of the type of web browser used,
• referrer (website from which you have reached our website)
• IP address.

The temporary storing of these so-called server log data is required to perform the services for technical reasons, for the purpose of calculating charges with service providers and, thereafter, to ensure system security. The data are anonymised at the latest after seven days by shortening of the IP address. The data are further analysed in anonymised form for statistical purposes.

If you have questions concerning the processing of your personal data by us, we will of course be pleased to provide information (Art. 15 GDPR) about the data relating to you.

Moreover, provided that the legal requirements of the GDPR are met, you have the right to correction (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21).

Please contact in all these cases our Data Protection Officer (see above 3.) at the communication addresses given there.

Finally, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR, Section 19 BDSG).

It will from time to time be necessary to update this Data Protection Notice. We therefore reserve the right to change its contents at any time. We will publish the updated version of the Data Protection Notice on this site. When you visit our website the next time, you should once again read the Data Protection Notice.

As of: September 2018